Ok, this isn't optimal, since it means that 'iotop' needs admincapabilities, and we may have to work on this some more. But at thesame time it is very much not acceptable to let anybody just readanybody elses IO statistics quite at this level.

Use of the GENL_ADMIN_PERM suggested by Johannes Berg as an alternativeto checking the capabilities by hand.